Trusted Design

Cleaver

アクターID: G0003

· MITRE Pageへのリンク

脅威アクターの詳細

Cleaver is a threat group that has been attributed to Iranian actors and is responsible for activity tracked as Operation Cleaver. (Citation: Cylance Cleaver) Strong circumstantial evidence suggests Cleaver is linked to Threat Group 2889 (TG-2889). (Citation: Dell Threat Group 2889)

脅威アクターの別名・別称

Cleaver
Threat Group 2889
TG-2889

利用した攻撃手法

• T1606.002 - SAML Tokens
• T1546.005 - Trap
• T1199 - Trusted Relationship
• T1565 - Data Manipulation
• T1034 - Path Interception

関連するCVE (攻撃手法に関連)

• CVE-2015-3043 (T1606.002)
• CVE-2016-1990 (T1606.002)
• CVE-2016-1991 (T1606.002)
• CVE-2015-2852 (T1606.002)
• CVE-2015-2854 (T1606.002)
• CVE-2015-2853 (T1606.002)
• CVE-2016-1287 (T1606.002)
• CVE-2016-1562 (T1606.002)
• CVE-2012-0507 (T1606.002)
• CVE-2013-2465 (T1606.002)
• CVE-2013-7331 (T1606.002)
• CVE-2016-4117 (T1606.002)
• CVE-2025-68645 (T1606.002)
• CVE-2016-6532 (T1546.005)
• CVE-2008-1436 (T1546.005)
• CVE-2015-1770 (T1199)
• CVE-2014-6352 (T1199)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る